General
-
Target
Client.exe
-
Size
47KB
-
MD5
78fd5acb0e896dcaa12e485770ce7162
-
SHA1
40125d3c938e449c87a530e4c76b336deba72561
-
SHA256
d6a87c71b28baff4e77ada7cea48ea68d69f66b516c37c5a5893d97d484ce190
-
SHA512
07a2c9f23a330ded608f1b2d743d9bfb0715df0fc401fe6d0d872ff620d7c00e32b2fcfe313504800c39b08f031cb0c1d9772bddbafa4d05122cd1ed0ecf6514
-
SSDEEP
768:dOEuILWCKi+DiBtelDSN+iV08YbygexjEKaovEgK/J9lZVc6KN:dOtmBtKDs4zb1+AYnkJ3ZVclN
Malware Config
Extracted
asyncrat
1.0.7
Default
127.0.0.1:8848
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
Client.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ